QID 198657

Date Published: 2022-02-10

QID 198657: Ubuntu Security Notification for BlueZ Vulnerability (USN-5275-1)

Bluez incorrectly handled memory write operationsin its gatt server.

A remote attacker could possibly use this to cause bluez tocrash leading to a denial of service, or potentially remotely execute code.

  • CVSS V3 rated as High - 6.2 severity.
  • CVSS V2 rated as Medium - 5.4 severity.
  • Solution
    Refer to Ubuntu security advisory USN-5275-1 for updates and patch information.
    Vendor References

    CVEs related to QID 198657

    Software Advisories
    Advisory ID Software Component Link
    USN-5275-1 Ubuntu Linux URL Logo ubuntu.com/security/notices/USN-5275-1